$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json) Hash identifier: 9td7ldViCTFez66ZwWWBfkhaPDB/mU+65U+wNh89sko= Subject key identifier: 65:26:43:93:01:8F:8A:22:09:90:2A:6C:53:AC:B9:C3:13:6F:70:99 Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft Manifest number: 42 Signing time: Mon 02 Mar 2026 14:48:57 +0000 Manifest this update: Mon 02 Mar 2026 14:48:57 +0000 Manifest next update: Mon 09 Mar 2026 14:48:57 +0000 Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: nHku46nHItpp82SjemgmidwPEYkE7OfiVF4ZJXKqWuo=) 2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: 2fuL5HR83y1lHVu02OBTTtqwAHQ9hwGuikZsXGexJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Mar 2 14:48:57 2026 GMT Not After : Mar 9 14:48:57 2026 GMT Subject: CN=69a5a359-9bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:18:c9:3a:57:18:55:e8:06:0f:1a:99:a4: 75:09:9e:c0:45:c1:b7:b6:e8:77:e5:58:4a:99:d1: ff:a5:71:8a:40:eb:90:56:46:a0:4e:74:16:d7:2e: 01:28:89:8b:e8:43:c0:76:d0:da:8d:34:1f:1e:b0: 7d:cc:5d:e2:c5:d4:c3:8e:1f:ea:cb:c2:ca:be:db: ba:13:2d:75:39:8b:fd:65:5b:f1:12:00:eb:dd:43: 6c:6b:06:9f:4c:0b:70:76:e3:7a:18:ca:ca:60:81: 5f:f8:36:8b:71:ec:c7:d7:2e:aa:1a:2d:13:ef:3f: e5:19:68:70:44:82:2a:fe:b6:d6:ce:82:ac:10:bc: 21:55:9a:a8:43:bd:9b:e2:f7:cb:56:81:65:e4:75: 5c:a2:b5:40:07:17:ae:dc:13:d4:69:f6:91:65:fd: 54:ca:27:42:bd:0d:b6:f7:2d:81:c7:aa:0d:e7:2a: 81:93:d2:88:0c:68:f7:67:97:2a:41:bb:bb:d7:0a: a3:6c:cc:84:dc:3b:b9:2d:54:16:27:d3:91:da:6d: 4a:c1:05:d4:d2:38:35:59:ca:ba:06:6c:28:22:58: d8:f3:23:85:f3:28:17:0c:09:82:af:91:d6:24:9e: 92:0e:80:8f:3a:1d:5a:9b:3d:8b:c9:ab:da:22:6f: 82:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:26:43:93:01:8F:8A:22:09:90:2A:6C:53:AC:B9:C3:13:6F:70:99 X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f0:24:a2:a0:28:8f:42:78:fc:90:57:fd:9e:eb:04:0d:5a: 4a:80:05:59:27:ea:4e:d5:45:40:3b:f9:b2:40:74:61:a5:3b: fa:e5:7d:76:27:44:c9:87:58:41:16:76:e1:de:90:4b:8f:f3: a4:d5:eb:9f:4e:75:ec:56:fb:a8:c4:12:5b:f6:79:43:22:64: 51:d7:71:cc:8f:0c:98:40:6d:4b:f2:e6:0d:e5:12:e0:25:41: a2:a4:9a:13:aa:50:d4:b4:e1:94:ef:32:c8:fb:fe:1a:03:0d: db:0f:5c:3d:bb:00:22:a5:c0:87:bd:0a:7d:e7:ce:a1:b3:fc: 49:2e:66:f5:80:17:85:25:09:ab:36:cb:ac:c1:4b:1b:52:f0: ff:2e:29:91:18:e2:bc:77:f2:23:bc:e8:08:7f:44:14:91:d6: 55:6e:e8:82:54:de:0a:d2:77:59:75:6d:7f:fd:96:b7:84:57: f4:9d:cc:91:8b:76:e4:f6:db:87:59:06:2e:a3:22:71:50:56: 0f:28:10:9c:5f:fa:25:af:34:42:3f:7a:bf:0e:49:96:12:cf: 5d:01:e9:20:01:d6:79:e8:13:97:f8:37:e0:80:45:e5:5c:9a: 5c:31:05:2d:ed:67:a9:19:24:83:d8:c5:81:ec:39:60:46:ec: 4b:aa:b4:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0FFODExMC8GA1UEBRMoNjg0NTk3RTk5OEEzQTBDNjk4NzM2MUI3QzU3MjA0M0E4 MTZDMUM1MjAeFw0yNjAzMDIxNDQ4NTdaFw0yNjAzMDkxNDQ4NTdaMBgxFjAUBgNV BAMTDTY5YTVhMzU5LTliYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9shjJOlcYVegGDxqZpHUJnsBFwbe26HflWEqZ0f+lcYpA65BWRqBOdBbXLgEo iYvoQ8B20NqNNB8esH3MXeLF1MOOH+rLwsq+27oTLXU5i/1lW/ESAOvdQ2xrBp9M C3B243oYyspggV/4Notx7MfXLqoaLRPvP+UZaHBEgir+ttbOgqwQvCFVmqhDvZvi 98tWgWXkdVyitUAHF67cE9Rp9pFl/VTKJ0K9Dbb3LYHHqg3nKoGT0ogMaPdnlypB u7vXCqNszITcO7ktVBYn05HabUrBBdTSODVZyroGbCgiWNjzI4XzKBcMCYKvkdYk npIOgI86HVqbPYvJq9oib4LTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZSZDkwGP iiIJkCpsU6y5wxNvcJkwHwYDVR0jBBgwFoAUaEWX6ZijoMaYc2G3xXIEOoFsHFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQUU4LzNGN0UyNTc0QkUw NzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVXWDZaaWpvTWFZYzJHM3hYSUVPb0ZzSEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QUU4LzNGN0UyNTc0QkUwNzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01h WWMyRzN4WElFT29Gc0hGSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCs8CSioCiPQnj8kFf9nusEDVpKgAVZJ+pO1UVAO/myQHRhpTv65X12J0TJh1hB Fnbh3pBLj/Ok1eufTnXsVvuoxBJb9nlDImRR13HMjwyYQG1L8uYN5RLgJUGipJoT qlDUtOGU7zLI+/4aAw3bD1w9uwAipcCHvQp9586hs/xJLmb1gBeFJQmrNsuswUsb UvD/LimRGOK8d/IjvOgIf0QUkdZVbuiCVN4K0ndZdW1//Za3hFf0ncyRi3bk9tuH WQYuoyJxUFYPKBCcX/olrzRCP3q/DkmWEs9dAekgAdZ56BOX+DfggEXlXJpcMQUt 7WepGSSD2MWB7DlgRuxLqrSw -----END CERTIFICATE-----Generated at Wed Mar 4 08:20:44 2026 by rpki-client